Network-Level Malware Defense
Malware is malicious software: viruses, ransomware, trojans, spyware and other threats. Network-level malware blocking stops your devices from reaching domains known to spread malware, before a connection is made. Antivirus runs on each device and scans files.
VeloGuardian's malware blocking is part of Cloud Shield, the DNS filtering in the VPN tunnel. On Fortress and Citadel, known malware and phishing domains are blocked on our servers. Nothing runs on your device.
How Malware Domain Blocking Works
When a device on your network requests a file or visits a website, the domain lookup is checked by Cloud Shield first:
- Domain blocklists: The domain is checked against lists of known malware and phishing domains. If it is listed, it does not resolve, so nothing downloads.
Key point: Blocklists are updated on our servers, so there is nothing to update on your devices.
What Malware Blocking Can Stop
Blocking known malware domains can stop downloads and check-ins for threats such as ransomware, trojans, spyware and cryptominers when they use listed domains. Ransomware encrypts your files and demands payment for the decryption key; these attacks can shut down entire businesses. Trojans disguise themselves as legitimate software while creating backdoors for attackers to access your systems, and spyware secretly monitors user activity, captures keystrokes, and steals credentials or sensitive data.
Other threats include adware that displays intrusive advertising and often bundles with other malicious components. Cryptominers are an increasingly common threat, hijacking your devices' processing power to mine cryptocurrency, which degrades performance and increases energy costs.
Why Network-Level is Better
Traditional endpoint antivirus has limitations that network-level protection addresses:
- No software to manage: There's nothing to install, update, or troubleshoot on individual devices. Protection is applied automatically through the VPN tunnel.
- Consistent coverage: Every device on your network is protected equally, regardless of operating system, device type, or whether local antivirus is running.
- Stops threats upstream: Known malware domains are blocked before the device connects. Even if a device has outdated local antivirus, network-level protection still applies.
- No load on your device: The check happens on our DNS servers.
Blocking known malware domains still works when local antivirus is outdated, missing, or disabled.
Network-level malware blocking works best as a complement to endpoint protection, not a replacement. VeloGuardian adds a layer of defense that blocks known malware domains before your devices connect.
Malware Blocking in VeloGuardian (Fortress and Citadel)
Malware and phishing blocking is on by default on Fortress and Citadel and needs no configuration.
Key point: On Fortress and Citadel, malware blocking is on by default with no configuration.
Malware blocking is part of Cloud Shield's DNS filtering.